Nothing wrong with this in itself. A zero-interaction attack - like being able to get root on everyone who even walks past your WiFi hotstop with their phone sw

Nothing wrong with this in itself. A zero-interaction attack - like being able to get root on everyone who even walks past your WiFi hotstop with their phone switched on, even if it's in their pocket not being used - IS more valuable than one that requires user interaction, and it's quite right for rewards to reflect that with higher rewards.